WID-SEC-W-2026-3553

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

GIMP: Mehrere Schwachstellen

view advisory published 2026-09-23

Ein Angreifer kann mehrere Schwachstellen in GIMP ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, und um Informationen offenzulegen.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2026-96546USlow2.5—
A one-byte out-of-bounds heap read flaw was found in GIMP's uncompressed DDS image loader. When a user opens an uncompressed DDS image, the file-dds plug-in performs an uncondition…
CVE-2026-96545USmedium4.4—
An out-of-bounds heap read flaw was found in GIMP's TIM image loader. When a user opens a crafted 4bpp TIM image that causes promotion to an RGBA layer, the file-tim plug-in alloca…
CVE-2026-96543US——
CVE-2026-96544US——
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan